Health care provider agrees to invest in cybersecurity protections

The New York Attorney General's Office reached an agreement with Refuah Health Center to invest USD1.2 million in cybersecurity measures after allegedly failing to protect patient data from a ransomware attack. The company must pay USD450,000 in penalties and take steps such as upkeep an information security program, require multifactor authentication to remotely access data and conduct audits to ensure limited user access.